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FIG. 3 
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{Dst=192.168.1.1/32, Protocol=TCP. Port=80} 


300 kbps 


10 SEC 
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{Dst=1 92. 168. 1.2/32} 


100 kbps 


10 SEC 
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FIG.5 





PERFORMANCE ATTRIBUTE 


DETECTION 
THRESHOLD 


TIMES OF 
DETECTION 


1 


{Dst=http://www.abc.com} {res="hello"} 


5 SEC 


2/3 


2 


{Dst=http://www.def.com/serch?hl=ja&ie=UTF- 
8&q=x+Y&lr=} {res="SEARCH RESULT"} 


5 SEC 
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FIG.6 
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FIG.7 




FIG.8 
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